The HTTP Stream transport does not implement any authentication mechanism, unlike the SSE transport. I'd expect it to call handleAuthentication() method somewhere, but it is missing anywhere in the code.